Install and configure the Performance Analytics for Vulnerability Response [PA] application

Release version:
Yokohama
Xanadu
Washington DC
Vancouver
UpdatedJan 30, 2025
7 minutes to read

Yokohama
Vulnerability Response

Before you can use the Performance Analytics for Vulnerability Response application, you must get entitlement and download the application from the ServiceNow Store, install it on your ServiceNow AI Platform® instance, and complete a few installation and configuration steps. The PA application is not installed as part of the Vulnerability Response application. It is available as a separate subscription.

Before you begin

If you already have the application on your instance and you are updating to a newer version of the application, proceed to step 8 in the following steps to continue with the update and configuration.

For a fresh installation, complete the following setup checklist prior to installation. These setup tasks are required for a smooth installation and configuration.

To verify that plugins and applications are installed and activated, navigate to All > Subscription Management > Subscriptions in your instance. The list displays the subscriptions your organization has purchased.

Note: This process applies only to applications that are downloaded to production instances. If you're downloading applications to non-production or development instances, it's not necessary to get entitlements. Proceed to Activate a ServiceNow Store application.

Search:


Setup tasks	Description
Verify that the Vulnerability Response dependencies plugin (com.snc.vul_dep) is installed and activated.	Vulnerability Response Dependencies This plugin contains all the dependency plugins required to support the application. To verify that the plugin is installed and activated, in your instance you want the application navigate to System Applications > All Available Applications > All. If you are prompted to update other dependency plugins, Click the links in the dialogs and follow the prompts to continue.
Verify that the ServiceNow Vulnerability Response application (sn_vul) is installed and activated.	Vulnerability Response To verify that the plugin is installed and activated, in your instance you want the application navigate to System Applications > All Available Applications > All. If you are prompted to update other dependency plugins, Click the links in the dialogs and follow the prompts to continue. Activation of this plugin on production instances may require a separate license. Contact ServiceNow for details.
Verify that you have the required ServiceNow roles for your instance. Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.	The following roles are required for installation, configuration, and verification of expected results: The Performance Analytics Admin [pa_admin] or the system [admin] installs the application and verifies the expected results. The Vulnerability Admin [sn_vul.vulnerability_admin or sn_vul.admin (deprecated)] oversees configuration and verifies expected results with the PA dashboards. The Remediation Owner [sn_vul.remediation_owner] oversees change management tasks and reads and updates assigned records. The sn_vul.remediation_owner role is also automatically assigned when any user is assigned the itil role.
Verify the Performance Analytics and Vulnerability Response applications are compatible.	For compatibility information, see KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes

Role required: admin or pa_admin

Procedure

To get entitlement and download the application on your ServiceNow AI Platform instance, navigate to the ServiceNow Store.
In the upper right of the page, click Log in.
In the dialog that is displayed, enter your HI credentials and click Login.
On the page that is displayed, if not selected, click the ServiceNow Products tab.
On the product list page, click Performance Analytics - Vulnerability Response.
Enter the Instance Name and Reason for the Instance, and click Validate Instance.
A page with the Opt-in button is displayed.
To get the Performance Analytics for Vulnerability Response application, click Opt-in.
To agree to the terms and conditions, at the prompt, select the check box and click Accept.
(Optional) Alternatively, to manage your entitlement for the application on other ServiceNow AI Platform instances, follow these steps.
1. If the Manage Entitlement button is not displayed, click the Performance Analytics for Vulnerability Response application on the Product List to display it.
2. With the Eligible tab selected, click Manage Entitlement.
3. In the Manage Entitlements for Vulnerability Response dialog that is displayed, choose one:
4. Click OK or Cancel to continue.
  You are ready to activate plugins and install the application on your ServiceNow AI Platform instance(s).
Log in to the ServiceNow AI Platform instance that you want to install the Vulnerability Response application on.
Navigate to All > System Applications > All Available Applications > All.
From the applications listed, locate the Performance Analytics - Content Pack - Vulnerability Response (sn_vul_analytics) application and click Install.

Note: If you are updating to a new version, select the version you want from the choice list.
and click Update.

The Application installation dialog is displayed. Any dependencies that will be installed automatically with the application are also displayed.
(Optional) If you want demo data, select the Load demo data check box and click Install.

Note: If you do not select the Load demo data check box, demo data is not available to install from the Application Manager later. For information on how to install or reinstall demo data after the initial installation, see the Workaround to install demo data if application is already installed [KB0722909] article in the Now Support Knowledge Base.

This installation may take some time. A message is displayed in the Install dialog after the application is successfully installed.
Click Close.
(Optional) If you anticipate a large number of active vulnerable items in your environment, you may prefer to change the default setting for the maximum number of collected records, enable scheduled jobs, and set collection times during off-hours.
To change these and other settings for the application after it is installed, follow these steps.
1. Navigate to All > Performance Analytics > Admin console.
2. On the Advanced Configuration tile, click the Performance Analytics Properties link.
3. On the Admin Console [Performance Analytics] page, scroll to the Performance Analytics Data Collector section.
  The default setting (50,000 records) is displayed for the Maximum number of rows that are allowed to be fetched from an Indicator Source.
4. You may prefer to increase this number to a value that is roughly 20% more than the total number of active vulnerable items (VIs) you anticipate in your environment.
5. Click Save.
6. To activate scheduled jobs, navigate to Performance analytics > Data Collector > Jobs.
  The Scheduled Data Collection list is displayed. In the Active column, the scheduled jobs listed in the Application column for Performance Analytics - Content Pack - Vulnerability Response by default are disabled (false).
  Note: a scheduled job for historical data collection is not displayed on the list of jobs. For large sets of data, you may prefer to start collecting data and trends over time by enabling your daily jobs when you are setting up the Performance Analytics for Vulnerability Response application.
7. In the Name column, click a link to open a PA_VR job record.
8. If fields are not editable, click the here link to edit them.
9. In the Job parameters section, click the Active check box to schedule a job.
  The Time fields are displayed.
10. Enter the start time for the job.
  If you anticipate a large volume, you may prefer to set collection times during off-hours. If you anticipate 10 million active VIs or greater in your environment, contact your ServiceNow® implementation partner for more information on setting up your data collection environment.
  For more information about the indicators used for data collection, see View the Performance Analytics indicators for Vulnerability Response [PA].
11. After you have enabled all the jobs you want, click Update.
  The Scheduled Data Collection list is displayed. For more information, see Performance Analytics properties.